YARA v3.7.0
time
module (Wesley Shields)yara
command-line tool now accept multiple rule files- Allow a configurable limit for the number of strings per rule (option
--max-strings-per-rule
) - Implement integrity check for compiled rules
- Implement API for customizing
import
statement (@edhoedt) - Scan process memory in FreeBSD and OpenBDS (Hilko Bengen)
- BUGFIX: Negated character classes not working with case-insensitive regexps (#765)
- BUGFIX: Multiple bugs while parsing ELF files (Nate Rosenblum)
- BUGFIX: Out-of-bounds access while parsing PE files.
- BUGFIX: Memory leaks while parsing invalid rules.
Refer to the documentation for information on how to build and install YARA.